Saturday

The Des Moines Register was the first to report that credit and debit card information of some Hy-Vee customers is being sold on an internet site for $17 to $35 apiece.

Hy-Vee issued a statement to station KCCI saying it is aware of reports of the stolen information being sold and is working with payment card networks to identify the cards and work with issuing banks.

Hy-Vee acknowledged earlier this month that it detected unauthorized activity on some of its payment processing systems linked to card payments at Hy-Vee restaurants, fuel pumps and drive-thru coffee shops. The company doesn't believe the breach extended to payments systems used inside its grocery stores, drugstores and convenience stores.